If your server currently uses APF but you’d prefer CSF, contact Heroic Support® and request a switch. There is no charge, it typically takes only a few minutes, and the only service that needs to be restarted as a result is the firewall itself. Our support technicians also can port your existing APF rules to CSF. If requesting an upgrade, please be sure to indicate whether your server uses the Guardian backup service so that its rules also can be configured.

Step #1: Open the Firewall Management Page

Once logged in to WHM, you will find the CSF interface under the Plugins section in the left menu.

Click on ConfigServer Security&Firewall or begin typing “firewall” into WHM’s search box at the top left to quickly locate the link.

Step #2: Open Firewall Settings

Step #3: Manage Ports

On the Firewall Configuration screen, scroll down to the IPv4 Port Settings section.

You will be editing the fields in the Allow incoming TCP ports and Allow outgoing TCP ports sections.

To allow incoming connections to a port, add the number to the TCP_IN = field.

To block incoming connections to a port, remove the port number from the TCP_IN = field.

To allow outgoing connections from a port, add the port number to the TCP_OUT = field.

To block outgoing connections from a port, remove the port number from the TCP_OUT = field.

Step #4: Save Changes and Restart the Firewall

Scroll all the way to the bottom of the Firewall Configuration page and click the Change button to save the settings.

After saving the settings, you will be given the option of restarting the firewall or returning to the settings page to continue editing. Since your changes will not take effect until the firewall is restarted, you will need to click the Restart csf+lfd button to apply the new settings.

Tip: Also Check Storm® Firewall Settings

Storm® Dedicated and VPS customers also have access to a separate Storm® Firewall.

If you are using the Storm® Firewall and have configured it to use advanced settings, you will want to ensure that the ports you’ve changed in WHM also are changed there.

You can access your Storm® Firewall settings from Manage. After clicking on your server name, navigate to the Network section and select the Firewall tab.

If it’s active and using advanced settings, you will need to replicate your port rule in the Storm® Firewall interface to ensure traffic can reach the port.